3 matches found
PHP Object Injection
intelliants/subrion is vulnerable to PHP object injection. The vulnerability exists through the serialized data in the subpages value within admin/blocks.php to block/edit...
6.5CVSS2.9AI score0.00864EPSS
SaveExploits1References1Affected Software1
CVE-2020-12469
admin/blocks.php in Subrion CMS through 4.2.1 allows PHP Object Injection with resultant file deletion via serialized data in the subpages value within a block to blocks/edit...
7.1CVSS0.00864EPSS
SaveExploits1References4
CVE-2020-12469: Deserialization of Untrusted Data
admin/blocks.php in Subrion CMS through 4.2.1 allows PHP Object Injection with resultant file deletion via serialized data in the subpages value within a block to blocks/edit...
6.5CVSS6.7AI score0.00864EPSS
SaveExploits1References2
20